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Top Stories 

• A mechanical failure likely caused two explosions at a Pharmachem Laboratories Inc. food 
laboratory in Totowa, New Jersey, August 2, injuring two workers and causing millions of 
dollars in damage to the structure. - Newark Star-Ledger (See item 14 ) 

• The mayor of Toledo, Ohio, lifted a tap water ban affecting as many as 400,000 people in 
Toledo and four municipalities in Michigan August 4 after test results returned 
nondetectable levels of an algae-related toxin. - CNN (See item 20 ) 

• Fire crews worked August 4 to contain several wildfires burning in California, Oregon, and 
Washington, which combined have burned more than 150 square miles, destroyed more 
than a dozen homes and structures, and prompted the evacuation of hundreds of residences. 
- Associated Press (See item 21 ) 

• Crews worked to reach 500 children and adults trapped at the Forest Home church camp 
following a mudslide caused by torrential rain that swept across San Bernardino County, 
California, August 3. - CNN (See item 28) 
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Energy Sector 



1. August 4, KREM 2 Spokane - (Washington) Could be days for some to have power 
restored after storm. Utility crews worked August 4 to restore power to more than 
15,000 customers that remained without service after an August 2 storm knocked out 
electricity to more than 50,000 customers throughout Washington. 

Source: http://www.krem.com/news/local/Severe-weather-moves-across-the-Inland- 
Northwest-26970021 1 .html 

T Return to top i 

Chemical Industry Sector 

2. August 4, Magnolia Reporter - (Arkansas) Albemarle Corporation issues “all clear” 
following Magnolia South Plant bromine leak. Albemarle Corporation 
representatives cleared the scene August 4 after crews secured a bromine leak at the 
company’s Magnolia South facility in Arkansas over 3 hours after it was reported 
August 3. The cause of the leak and the amount of bromine released is under 
investigation, while initial tests show no detectable levels of bromine recorded offsite. 
Source: 

http://www.magnoliareporter.com/news and business/local news/article c3778606- 
Ib69-lle4-b85b-001a4bcf887a.html 

3. July 31, WFXG 54 Augusta - (Georgia) 2 workers burned after spill at chemical 
plant. Two employees of a ChemTrade chemical plant in Augusta were transported to 
an area hospital for burn injuries they sustained after they were sprayed with sulfuric 
acid inside the facility July 31. Authorities contained the spill and reported that there 
was no environmental impact. 

Source: http://www.wtoc.com/story/26162755/2-workers-bumed-after-spill-at- 
chemical-plant 

[ Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

4. August 1, Morris News Service - (South Carolina) Court orders SC to improve safety 
at radioactive waste dump. The South Carolina Court of Appeals ordered Chem- 
Nuclear and the South Carolina Department of Health and Environmental Control 
(DHEC) to submit a plan to bring the company’s Barnwell low-level radioactive waste 
site into compliance after it found that the site did not have sufficient groundwater 
protection measures and that the DHEC had not enforced some aspects of applicable 
laws. 

Source: http://onhneathens.com/breaking-news/2014-08-01/court-orders-sc-improve- 
safety-radioactive-waste-dump 

[ Return to top ] 
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Critical Manufacturing Sector 



5. August 1, Autoblog - (National) Hyundai recalls over 419k vehicles in three 
campaigns. Hyundai announced three recalls covering 419,000 vehicles, with the 
largest recall affecting 225,000 model year 2001-2006 Santa Fe vehicles due to the 
potential for front springs to rust and crack when exposed to cold temperatures and 
road salt. The other recalls include 133,075 model year 201 1 Sonata vehicles due to the 
potential to leak brake fluid, and 61,122 Veracruz vehicles for potential alternator 
failure. 

Source: http://www.autoblog.com/2014/08/01/hyundai-recalls-419k-vehicles-in-three- 
campaigns/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. August 4, Associated Press - (National) PF Chang’s names 33 restaurants in data 
breach. Restaurant chain P.F. Chang’s provided the locations of 33 restaurants that 
were compromised in a data breach uncovered in June, which included restaurants in 
Baltimore; Pittsburgh; St. Louis; Austin, Texas; and Charlotte, North Carolina. An 
investigation into the breach is continuing. 

Source: http://www.cnbc.com/id/101884120 

7. August 1, Threatpost - (International) Citadel malware variant allows attackers 
remote access, even after removal. Researchers at IBM identified a new variant of the 
Citadel banking malware that uses Windows shell commands to create a new local user 
with a non-expiring password in order to circumvent the removal of the malware and 
maintain remote control over the affected system. 

Source: http://threatpost.com/citadel-malware-variant-allows-attackers-remote-access- 
even-after-removal 

8. August 1, U.S. Securities and Exchange Commission - (National) SEC obtains nearly 
$70 million judgment against Richmond, Va.-based firms and CEO found liable 
for defrauding investors. The U.S. Securities and Exchange Commission obtained a 
nearly $70 million final judgment August 1 against Richmond, Virginia-based AIC 
Inc., Community Bankers Securities LLC, and the companies’ CEO following an SEC 
complaint that the companies and CEO defrauded investors in several States by 
misrepresenting or omitting material information on the companies’ investment 
products. The companies were never profitable and funds were used to pay back 
principle and returns to existing investors. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370542590856 
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9. July 31, KNSD 39 San Diego - (California) ‘Risky Business Bandit’ tied to 4 bank 
robberies. The FBI is seeking a suspect known as the “Risky Business Bandit” in 
connection with four bank robberies in San Diego County. The suspect’s most recent 
robbery occurred at a San Diego County Credit Union branch July 25. 

Source: http://www.nbcsandiego.com/news/local/San-Diego-FBI-Risky-Business- 
B ank-B andit-2694645 6 1 .html 

T Return to top i 

Transportation Systems Sector 

10. August 4, Associated Press - (West Virginia) Track reopens following Barbour 
County derailment. Authorities are investigating a trail derailment August 1 after 1 1 
cars from a 90-car train carrying coal derailed in Barbour County. Officials reopened 
the Appalachian & Ohio Railroad track August 2 following repairs. 

Source: http://www.wowktv.com/storv/26187664/track-reopens-following-barbour- 
county-derailment 

11. August 2, KXTV 10 Sacramento - (California) 2 injured in Sierra forest helicopter 
crash. Authorities are investigating after a Heli-Flite Inc., helicopter carrying four 
people crashed below the dam at Buck Island Lake in the Eldorado National Forest 
August 1 leaving two people on board with serious injuries. 

Source: http://www.newsl0.net/story/news/local/eldorado-hills/2014/08/01/el-dorado- 
national-forest-helicopter-crash-iniuries/13486305/ 

12. August 1, Times of Northwest Indiana - (Indiana) 1,000 feet of electrical wire stolen 
from NIPSCO poles. Thieves stole approximately 1,000 feet of live electrical wire 
from 6 Northern Indiana Public Services Co., poles July 30 causing the outage of 
several streetlights in Gary. 

Source: http://www.nwitimes.com/news/local/lake/garv/feet-of-live-electrical-wire- 
stolen-from-gary-nipsco-poles/article fl038703-8c77-5207-937b-40bf6b805e32.html 

13. August 1, KGO 7 San Francisco - (California) 20 injured when Muni train collides 
with big-rig. A Muni light rail train struck a semi-truck making an illegal left turn in 
San Francisco August 1 leaving 20 people injured. 

Source: http://abc7news.com/traffic/sf-fire-responds-to-two-different-inurv-accidents- 
involving-muni/234050/ 

For another story, see item 28 
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Food and Agriculture Sector 

14. August 3, Newark Star-Ledger - (New Jersey) N.J. eggnog blast blamed on 
mechanical failure. A mechanical failure likely caused two explosions at a 
Pharmachem Laboratories Inc. food laboratory in Totowa August 2, injuring two 
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workers and causing millions of dollars in damage to the structure. Authorities believe 
the first explosion originated in a heat exchange unit that was heating a vat of eggnog 
flavoring and the second blast was the result of a pocket of hot air or gas that built up 
inside the vat. 

Source: http://www.dailyrecord.com/storv/news/local/new-iersev/2014/08/04/official- 
mechanical-failure-caused-totowa-food-lab-blast/1 3579857/ 



15. August 2, Food Poisoning Bulletin - (Virginia) Souperb soup products botulism 
warning in Virginia. The Virginia Department of Agriculture and Consumer Services 
advised against the consumption of Souperb soup products due to the possibility they 
were improperly processed and are susceptible to contamination with Clostridium 
botulinum toxin. Souperb was expected to issue a recall August 2 for the soups which 
are packaged in Mason-style glass jars and sold at Virginia farmer’s markets, retail 
stores, and the Richmond-based Souperb store. 

Source: http://foodpoisoningbulletin.com/2014/souperb-soup-products-botulism- 
warning-in- Virginia/ 

16. August 1, Food Poisoning Bulletin - (Michigan) Michigan cyclospora cluster sickens 
three. The Michigan Department of Community Health is trying to identify a food 
source connected to three confirmed cases of Cyclosporiasis in the State and is working 
to determine if the cases are connected to cyclospora infection reports in 1 8 other 
States, including 124 cases across 31 counties in Texas. 

Source: http://foodpoisoningbulletin.com/2014/michigan-cyclospora-cluster-sickens- 
three/ 



17. August 1, U.S. Food and Drug Administration - (National) New England Greens, 
LLC dba Vibrant Health recalls Green Vibrance and Rainbow Vibrance because 
of possible health risk. Connecticut-based New England Greens issued a 
precautionary recall August 1 for 10 lots of its Green Vibrance and 1 lot of its Rainbow 
Vibrance products after Raw Deal, a supplier for the products, issued a recall for an 
ingredient used during the manufacturing process due to possible Salmonella 
contamination. The recalled products were distributed to retailers nationwide and sold 
through online sales. 

Source: http ://w w w .fda. gov/S afety/Recalls/ucm407 801 .htm 

18. August 1, U.S. Food and Drug Administration - (National) Sunburst Superfoods 
recalls Organic Raw Carob Powder because of possible health risk. Sunburst 
Superfoods issued a recall August 1 for its Organic Raw Carob Powder due to possible 
human health risks after a supplier for the product notified the company that an 
ingredient used during the manufacturing process may be contaminated with 
Salmonella. The products were sold in 1- and 5 -pound bags nationwide via online sales. 
Source: http://www.fda.gov/Safety/Recalls/ucm407794.htm 

19. July 31, U.S. Food and Drug Administration - (National) Wawona Packing Co. 
expands its voluntary recall of fresh, whole peaches, plums, nectarines, and pluots 
because of possible health risk. The U.S. Food and Drug Administration announced 
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July 31 that Wawona Packing Company expanded its July 19 recall for certain lots of 
whole peaches, nectarines, plums, and pluots to include all products packaged between 
June 1 and July 17 due to possible Listeria monocytogenes contamination. Wawona 
Packing notified business customers of the expanded recall and requested the products 
be removed from commerce. 

Source: http://www.fda.gov/Safety/Recalls/ucm407600.htm 
For another story, see item 6 
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Water and Wastewater Systems Sector 

20. August 4, CNN - (Ohio; Michigan) ‘Our water is safe,’ Toledo mayor says in lifting 
ban. The mayor of Toledo, Ohio, lifted a tap water ban affecting as many as 400,000 
people in Toledo and four municipalities in Michigan August 4 after test results 
returned nondetectable levels of an algae-related toxin. The tap water ban went into 
effect August 1 after the microcystin toxin was found in Lake Erie due to a harmful 
algae bloom. 

Source: http://www.cnn.com/2014/08/04/us/toledo-water-warning/index.html 
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Healthcare and Public Health Sector 

See item 21 
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Government Facilities Sector 

21 .August 4, Associated Press - (California; Washington; Oregon) Homes destroyed, 
hospital evacuated due to northern California wildfires. Fire crews worked August 
4 to contain several wildfires burning in the Lassen National Forest in California, in 
Siskiyou County bordering Oregon, and near Ellensburg, Washington, which combined 
have burned more than 150 square miles, destroyed more than a dozen homes and 
structures, prompted the evacuation of hundreds of residences, and caused the Mayer 
Memorial Hospital in Burney to evacuate and transfer patients to another hospital. 
Source: http://www.foxnews.com/us/2014/08/04/homes-destroyed-hospital-evacuated- 
due-to-northem-califomia- wildfires/ 



22. August 2, WDBJ 7 Roanoke - (Virginia) Repairs to utility vault complete at 

Lynchburg City Hall. The Fynchburg City Hall in Virginia was evacuated for several 
hours August 1 while gas service was shut off due to a leak. Crews completed repairs to 
the utility vault outside the city hall and worked to restore gas service to the building. 
Source: http://www.wdbi7.com/news/local/lynchburg-citv-hall-evacuated-because-of- 
gas-leak/27267436 
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For another story, see item 28 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

23. August 4, Softpedia - (International) Registry- residing malware creates no file for 
antivirus to scan. A researcher with GData published details of a new type of malware 
dubbed Poweliks that can avoid detection by antivirus programs by not creating any file 
on the disk, performing its functions instead in the system memory, and making the 
registry key unavailable to the Registry Editor. 

Source: http://news.softpedia.com/news/Registry-Residing-Malware-Creates-No-File- 
for-Antivirus-To-Scan-453374.shtml 

24. August 4, Securityweek - (International) Remote code execution flaw patched in 
Samba 4. The developers of open source software suite Samba released a patch August 
1 that closes a vulnerability present in all versions of Samba 4 that could allow an 
attacker to generate a remote code execution vulnerability as the root superuser. 

Source: http://www.securitvweek.com/remote-code-execution-flaw-patched-samba-4 

25. August 4, Help Net Security - (International) Thousands of Mozilla developers’ 
emails, passwords exposed. Mozilla stated August 1 that around 76,000 Mozilla 
Developer Network email addresses and around 4,000 hashed and salted passwords 
were left publicly accessible for about 30 days due to a failed data sanitation process. 
Developers were advised to change their passwords as a precaution. 

Source: http://www.net-securitv.org/secworld.php?id=17201 

26. August 4, The Register - (International) Cisco patches OSPF bug that sends traffic 
into black holes. Cisco released a patch for a flaw in its Open Shortest Path First 
(OSPF) routing implementation that could allow an attacker to take control of the OSPF 
Autonomous System domain routing table, intercept traffic, or blackhole traffic. The 
issue affects all unpatched versions of Cisco IOS Software, IOS XE Software, ASA 
Software, PIX Software, and FWSM Software. 

Source: http://www.theregister.co.uk/2014/08/04/cisco patches ospf bug/ 

27. August 4, Help Net Security - (International) Synology NAS users hit with 
Cryptolocker variant. Users of Synology’ s network-attached storage (NAS) devices 
reported having devices infected with a variant of the Cryptolocker ransomware 
beginning over the weekend of August 2 that encrypts files and demands a ransom to 
decrypt them. The method by which the malware is infecting NAS devices is currently 
unknown and users were advised to backup their files and unplug the devices until the 
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infection vector is identified. 

Source: http://www.net-security.org/malware news.php?id=2827 



For another story, see item 7 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

28. August 4, CNN - (California) Campers being rescued after mudslide traps them in 

southern California. Crews used bulldozers August 4 to remove heavy mud and up to 
8 feet of rock on roadways in Forest Falls in an effort to reach 500 children and adults 
trapped at the Forest Home church camp following a mudslide caused by torrential rain 
that swept across San Bernardino County August 3. About 1,500 people are also 
stranded in Oak Glen due to flash flooding caused by the storms, and one motorist was 
found dead inside a vehicle that was swept off a roadway and into a creek by 
floodwater. 

Source: http://www.cnn.com/2014/08/03/us/califomia-mudslides/index.html 

29. August 4, WJLA 7 Washington, D.C. - (Maryland) Apartment fire in Frederick, 
Maryland injures 10, displaces 24. Authorities are investigating the cause of an 
August 4 fire that broke out in the back of a Frederick apartment building and spread 
throughout the 2nd and 3rd floors of the structure, causing an estimated $100,000 in 
damage and leaving 24 residents displaced. At least 10 residents were injured by the 
blaze. 

Source: http://www.wila.com/articles/2014/08/apartment-fire-in-frederick-maryland- 
iniures-10-105724.html 

30. August 4, Associated Press; Savannah Morning News - (Georgia) 21 people displaced 
after fire near Savannah. Authorities believe a lightning strike may be responsible for 
an August 3 fire that displaced 21 residents of the Georgetown Woods Waterford 
Plantation apartment complex near Savannah. 

Source: http://www.northwestgeorgianews.com/associated press/news/state/people- 
displaced-after- fire-near-savannah/article 8al3b51a-lbdc-l Ie4-b49f- 
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0017a43b2370.html 



31. August 3, WHNS 21 Greenville - (South Carolina) Firefighters: Dollar General store 
'total loss' after fire. Customers and employees were evacuated from a Dollar General 
store in Greenwood August 3 due to an electrical fire that was mostly contained to a 
stock room and the back wall of the structure. Almost all of the store’s content was 
deemed a total loss due to heavy heat, smoke, and water damage. 

Source: http://www.foxcarolina.com/storv/26185410/firefighters-dollar-general-store- 
total-loss-after-fire 



32. July 31, KTVK 3 Phoenix - (Arizona) Winds topple multiple RVs in Buckeye; 2 
injured. Strong winds associated with a storm that moved through Buckeye, Arizona, 
August 31, flipped several recreational vehicles (RV) at a mobile home park, injuring at 
least 2 individuals and knocking out power in the area. 

Source: http://www.azfamily.com/news/Winds-topple-multiple-RVs-in-Buckeve-2- 
injured-26949285 1 .html 

33. July 31, U.S. Environmental Protection Agency - (Missouri) Final report on 
Bridgeton Municipal Athletic Complex shows facility is suitable for public use; no 
further action needed. A U.S. Environmental Protection Agency Region 7 
administrator reported July 31 that the Bridgeton Municipal Athletic Complex in 
Missouri is suitable for public use following final comprehensive radiation testing and 
soil sampling that showed no hazardous levels of surface gamma radiation at the site. 
The representative also stated that no further environmental action is needed after more 
than 58,000 surface points were analyzed since the investigation was initiated due to 
residents’ concerns May 9. 

Source: 

http://yosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/6aca0 

e08al803el785257d26006d38be 
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Dams Sector 

34. August 4, Associated Press - (California) Flash flood warning issued as Tuolumne 
County dam springs leaks. A flash flood warning was issued for parts of Tuolumne 
County August 3 after the operator of Twain Harte Dam in Sonora reported a leak in 
the dam, prompting authorities to drain the water to reduce pressure on the structure. 
The lake was closed until further notice and officials assured the public that there was 
no imminent threat of failure. 

Source: http://www.contracostatimes.com/news/ci 26272027/flash-flood-waming- 
issued-tuolumne-county-dam-springs 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 
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